冰点DF6.0For Win2k3打造全过程(3) 00443152 |. E8 6F390E00 CALL ; \GetVersionExA00443157 |. 85C0 TEST EAX,EAX00443159 |. 75 07 JNZ SHORT DF6_00_0.004431620044315B |. 33C0 XOR EAX,EAX0044315D |. E9 5F030000 JMP DF6_00_0.004434C100443162 |> 8B95 64FFFFFF MOV EDX,DWORD PTR SS:[EBP-9C]00443168 |. 83EA 01 SUB EDX,1 ; Switch (cases 0..2)0044316B |. 0F82 3C030000 JB DF6_00_0.004434AD00443171 |. 0F84 6A020000 JE DF6_00_0.004433E100443177 |. 4A DEC EDX00443178 |. 0F85 41030000 JNZ DF6_00_0.004434BF0044317E |. 83BD 58FFFFFF>CMP DWORD PTR SS:[EBP-A8],4 ; Case 2 of switch 0044316800443185 |. 77 14 JA SHORT DF6_00_0.0044319B00443187 |. 85FF TEST EDI,EDI00443189 |. 74 0E JE SHORT DF6_00_0.004431990044318B |. 68 DCBF5400 PUSH DF6_00_0.0054BFDC ; /Arg2 = 0054BFDC ASCII "Microsoft Windows NT "00443190 |. 57 PUSH EDI ; |Arg1